NCP Secure Enterprise VPN Server (Win)

Transcription

1 Major Release: r36322 Date: July 2017 Prerequisites Microsoft Operating Systems: The following Microsoft Operating Systems are supported with this release: Windows Server 2008 R2 64 Bit Windows Server 2012 R2 64 Bit Windows Server Bit Update Prerequisites Please read the instructions for updates of previous versions carefully! (See NCP_RN_SES_10_and_HAS_10_Update_and_License_de.PDF) Prerequisites for Configuration via Secure Enterprise Management (SEM) Secure Enterprise Management Server: Version 4.05 or later Management Plugin - Server Configuration: Version or later Prerequisites for High Availability If the Secure Enterprise VPN Server is used in a high availability network, ensure that the High Availability Server (HA Server) is version or later. Note: From version 10.0, a license key of the same version of Secure Enterprise VPN Server is required to use this product. 1 / 5

2 1. New Features and Enhancements 2. Improvements / Problems Resolved IKEv2 Connection with Device and User Certificate If a VPN connection using IKEv2 required authentication of the device via device certificate and the user authentication via user certificate at the same time, the connection failed. This issue has now been resolved. Incorrect Display of Users Authenticated via LDAP VPN users authenticated via LDAP are listed incorrectly in the statistics under "Link Profiles (local)". This issue has been fixed so that it is now correctly displayed under "Link Profiles (RADIUS/LDAP)". The maximum number of LDAP Users has been increased from 10,000 to 40, Known Issues 4. Getting Help for the NCP Secure Enterprise VPN Server To ensure that you always have the latest information about NCP s products, always check the NCP website at: 2 / 5

3 Major Release: r36173 Date: July 2017 Prerequisites Microsoft Operating Systems: The following Microsoft Operating Systems are supported with this release: Windows Server 2008 R2 64 Bit Windows Server 2012 R2 64 Bit Windows Server Bit Update Prerequisites Please read the instructions for updates of previous versions carefully! (See NCP_RN_SES_10_and_HAS_10_Update_and_License_de.PDF) Prerequisites for Configuration via Secure Enterprise Management (SEM) Secure Enterprise Management Server: Version 4.05 or later Management Plugin - Server Configuration: Version or later Prerequisites for High Availability If the Secure Enterprise VPN Server is used in a high availability network, ensure that the High Availability Server (HA Server) is version or later. Note: From version 10.0, a license key for the same version of Secure Enterprise VPN Server and the Secure Enterprise HA Server is required to use these two products in combination. 3 / 5

4 1. New Features and Enhancements Advanced License Management for ios Clients From this version of the NCP Secure Enterprise VPN Server the license management of the NCP Secure Enterprise ios client is supported. Significant Performance Improvements Higher Number of Outgoing Connections The maximum number of outgoing VPN connections has been increased from 750 to 10,000. Support for IKEv2 Signature Authentication (RFC 7427 with RSA-PSS padding) A new certificate authentication method according to RFC7427 has added to the client and server. The following key types are supported for user and hardware certificates: RSA, ECC NIST, ECC BP in different key lengths. In the "Certificate Verification" of a domain group, the "Enable RSA Authentication with PKCS # 1 V1.5 Padding" option is activated by default. The previous IKEv2 RSA certificate authentication can only still be used if this option is disabled. Client VPN IP Address Assignment for Metered Connections This featured is used in home office environments, where the internet connection is metered (particularly routers using mobile data). In this scenario, the user workstation is connected to the Internet router via Wi-Fi. The Wi-Fi profile in the NCP Secure Client can be configured as a metered connection" under the profile settings. This setting is sent to the NCP Secure Enterprise VPN Server. In order to reduce costs for metered connections, the client receives an IP address from a pool assigned for clients with a mobile connection during tunnel setup. Centralized applications that provide the client with updates can therefore only transfer the most necessary data traffic. The pool ranges for metered connections are defined in the server under "address allocation", and each pool receives a number. After entering the pool number in the link profile under "Routing" the client is assigned an IP address from the corresponding pool. If the pool numbers are set to zero and no fixed IP address is assigned, the IP address range of the configured DHCP server is used. Support for Several Server Certificates Several standard certificates can now be set for each domain group. The Secure Enterprise VPN Server can select the one that best suits the client's request (e.g. the longest expiry period) for the respective domain group. Display of Additional Connection Information The following information is displayed in the statistics under "Link profile": 4 / 5

5 - NCP VPN Path Finder version - Seamless Roaming The account log shows which local endpoint IP address the client connects to. 2. Improvements / Problems Resolved Netmasks were not not transferred correctly during client connection. This issue has been resolved. New Tool for Creating the Scripts for dve_up and dve_down under [SES-INSTALL-DIR] / sbin / ses-vrrp-setup. 3. Known Issues 4. Getting Help for the NCP Secure Enterprise VPN Server To ensure that you always have the latest information about NCP s products, always check the NCP website at: 5 / 5